—
PYSEC-2020-100
Quick fix
PYSEC-2020-100 — rsa: upgrade to the fixed version with the command below.
pip install --upgrade 'rsa>=4.7'Details
It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.
Are you affected?
Enter the version of the package you're using.